I've been looking for a way to filter macs on the lan side of a 871 router. The following works to deny a list of mac's from passing traffic.class-map match-any macfilter match source-address mac hhhh.hhhh.hhhhpolicy-map macfilter class macfilter ...